Provide dedicated option to query fake installed RPM packages with GPG keys associated with them

[Ricky-Tigg]

Hello. Fake RPM packages with GPG keys associated with them are taken in account while querying all installed packages.

$ rpm -qa | grep '^gpg-pubkey-' | wc -l
2

This ability to count such packages, which is useful, would be more to its advantage if queried on-demand and thus served by a dedicated option.

[pmatilai]

It's much faster to query by the name instead: rpm -q gpg-pubkey (and follow with whatever processing necessary)

[Ricky-Tigg]

Fake package can be identifiable by the prefix gpg-pubkey- in its name; that's a knowledge assumed unknown from the user nor was assumed needed the knowledge of the definition of a fake package. Yet it is unusual for the vast majority of users (be they beginners or even advanced) to be put in situation of investigating what a fake package is. I came myself to read about fake package by accident. It was though implicit in the report that rpm -qa could be considered in its role by solely reporting by default non-fake installed packages.

[ffesti]

Right place for this would be the rpmkeys tool. There actually already is a - commented out - stub for --list-keys and --delete-key waiting for someone to come along and implement them.

[ffesti]

Also gpg-pubkey is not the prefix of the name but the actual name. Otherwise rpm -q gpg-pubkey wouldn't work. The other gibberish is the hash of the key stuffed in version and release to make it unique.

[ffesti]

Resolved with #2921